Platform Features
Everything you need for NIS2/BSIG compliance - structured, auditable, and built to last.
Built with IT-Security Law Firms
Every requirement, form field, and compliance workflow was developed in collaboration with German IT-security law firms specializing in BSIG and NIS2.
This is not a generic checklist tool. The legal structure of each requirement reflects the actual text of the BSIG, mapped to the 10 mandatory measures of Section 30 and the entity categories defined in Sections 28-29.
Legal accuracy is the foundation - every field, option, and validation rule traces back to a specific statutory obligation.
NISD2.eu structures compliance so that management can demonstrate they fulfilled all three duties. Every approval is logged with timestamp and user identity, creating the evidence trail that Section 38 demands.
If the BSI audits your company, you need proof that management approved measures, oversaw implementation, and completed training. This platform generates that proof as a byproduct of normal use.
Section 38 BSIG makes management personally liable for cybersecurity compliance. Three duties apply: approval, oversight, and training. These cannot be delegated away.
132
Requirements
10
§ 30 Measures
AI
Assisted Prefill
Every requirement is a form. Every form field maps to a specific compliance obligation. Fill in the form, and you have documented your compliance. No ambiguity, no guesswork.
Forms support text, selections, multi-select, dates, and file uploads for evidence. AI-assisted prefill helps you draft responses based on your company profile, then you refine and approve.
The platform tracks every deadline across your compliance lifecycle. Notifications escalate through 10 phases - from early reminders to critical alerts - so nothing falls through the cracks.
Granular permissions control who gets notified for what. Assign responsibility per requirement, per module, per team member. The right person gets the right alert at the right time.
NIS2 compliance is not a one-time project. BSI registration, incident reporting cascades (24h / 72h / 1 month), KRITIS audit cycles, and training renewals all have hard deadlines with real penalties.
13 Operational Security Modules
Beyond the core compliance forms, NISD2.eu includes 13 operational modules that mirror the ongoing security operations the BSIG requires:
Asset Management - inventory of all critical systems and infrastructure
Risk Register - structured risk assessments with likelihood and impact scoring
Incident Management - detection, response, and BSI reporting workflows
Supplier Management - supply chain security assessments and monitoring
Policy Management - document lifecycle for security policies
Training Records - track mandatory cybersecurity training per employee
Access Control - role-based access management and reviews
Cryptography Register - encryption usage and key management records
Business Continuity - disaster recovery plans and test documentation
Vulnerability Management - tracking and remediation workflows
Network Security - architecture documentation and segmentation records
Security Monitoring - log management and detection system records
Secured Communications - MFA deployment and secure channel documentation
Each module is purpose-built for NIS2 - not adapted from a generic GRC template. Data flows between modules: an asset referenced in a risk assessment links to the same asset in your incident report.
Export Anytime
All compliance data lives in structured forms that can be exported at any time - for BSI audits, internal reviews, or legal proceedings. The complete history of your compliance posture is always available.
Data Stays Forever
Compliance only grows. New requirements get added, regulations evolve, your company changes. NISD2.eu is built on a first-principles data architecture: your compliance data stays here permanently. You never re-enter data. When regulations update, your existing documentation carries forward - you only fill in what changed.
This is not a spreadsheet you lose or a consultant's report that sits on a shelf. It is a living, versioned, auditable record of everything your company has done for NIS2 compliance - from day one, forever.